NEAS[.]c4d3a98563a8047b71a98c29419c9000[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c4d3a98563a8047b71a98c29419c9000.exe
Size

1.3MB
MD5

c4d3a98563a8047b71a98c29419c9000
SHA1

0a7bda83feec730af74ccf0c2cc852380b415a9f
SHA256

acd852dcff4dd24bbe26f118b42c6a8f89cd4bb826b45e6a317c3c43d5954174
SHA512

9b52bf9407bbb22d5c7642e3b481827439402cfdd0f531f846ece489fc0d4b0091401889b30037a778639b5e8b96abd0881741eb7c6d97d15a2a01863764b795
SSDEEP

24576:MBnsFbX0hh8GmxKqKqvGmxRxHHHssfvCbHnUN:MSFbXrGmxKqKqvGmxRxHHHssfabq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c4d3a98563a8047b71a98c29419c9000.exe

Files

NEAS.c4d3a98563a8047b71a98c29419c9000.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE